$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft File: z-BxqXL9eKZ_bT7VamGENAqz46Y.mft (raw, json) Hash identifier: M7a349JIBP6+ATz3HYD4e9I4OcdIfNU+qjwNVHKbUoM= Subject key identifier: 24:C4:AC:FB:29:15:3C:89:48:8C:02:20:F7:55:F2:11:A0:DE:02:0C Authority key identifier: CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 Certificate issuer: /CN=A916C4A5/serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Certificate serial: 0170 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft Manifest number: 0168 Signing time: Tue 13 Oct 2026 05:34:26 +0000 Manifest this update: Tue 13 Oct 2026 05:34:25 +0000 Manifest next update: Tue 20 Oct 2026 05:34:25 +0000 Files and hashes: 1: z-BxqXL9eKZ_bT7VamGENAqz46Y.crl (hash: bDkG+eAwVRVNFKVE7+iGQkL//j5w47SQKfUBhLzkd4M=) 2: FB01C0A4A24B11EFA8802F31C4F9AE02.roa (hash: HouHZa5vGgcIa83LrMGT7+XMplAnXagri+kcUGhALfQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 Oct 2026 05:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 368 (0x170) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916C4A5, serialNumber=CFE071A972FD78A67F6D3ED56A6184340AB3E3A6 Validity Not Before: Oct 13 05:34:25 2026 GMT Not After : Oct 20 05:34:25 2026 GMT Subject: CN=6acdc2e1-e149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:d8:5b:18:16:30:24:57:70:7d:ce:46:54: a8:47:5b:3e:f7:22:bf:62:e2:c0:5a:b8:93:24:2f: 53:31:d0:7f:36:38:6c:12:46:8f:76:b0:9a:07:05: c5:6e:6e:5b:52:3c:d6:77:3e:8f:38:bf:90:95:8a: 04:07:95:4a:84:38:1d:9a:25:5d:b3:b8:40:66:bc: 59:3f:15:e8:81:82:81:66:aa:55:2a:4b:89:20:bb: e9:18:f2:5d:80:d1:64:f3:1d:c0:43:0c:96:1e:d6: cf:00:bd:06:85:83:d4:3c:47:ea:23:17:59:1b:9e: 35:c6:7a:29:b1:52:15:43:e3:0a:53:a7:f3:1a:86: 24:00:06:e9:70:38:ff:60:73:95:1e:45:7d:2e:3d: 43:25:2a:12:b6:91:c2:4b:f2:3d:04:1a:c0:68:3c: 36:2e:5b:94:7d:ac:54:33:71:e5:e7:73:7a:cb:24: 91:58:92:d8:e9:da:dc:cf:20:f7:5e:f3:64:86:06: a2:82:14:15:1d:e3:e1:4f:d6:ca:68:11:d7:61:0a: 89:30:ed:4d:80:d6:49:df:66:d6:e6:18:3b:84:66: 66:c4:4b:ff:0b:89:bb:25:f7:4e:82:36:dd:db:4a: 7a:2a:c9:8e:1f:8f:3b:4f:99:c9:29:68:b5:ff:9c: 25:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C4:AC:FB:29:15:3C:89:48:8C:02:20:F7:55:F2:11:A0:DE:02:0C X509v3 Authority Key Identifier: keyid:CF:E0:71:A9:72:FD:78:A6:7F:6D:3E:D5:6A:61:84:34:0A:B3:E3:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/z-BxqXL9eKZ_bT7VamGENAqz46Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C4A5/BF50E862A23411EF978C8D6DC4F9AE02/z-BxqXL9eKZ_bT7VamGENAqz46Y.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:0d:9f:1e:0e:47:af:ad:47:1a:21:d8:b6:9b:04:f5:22:51: 05:c7:8d:d1:d2:d7:be:f5:80:ad:19:85:2b:26:0e:8c:e1:e5: a8:ee:45:f4:0f:6e:2e:9e:c1:9b:12:0a:3e:97:a4:91:77:3e: bb:5a:c7:d8:ca:14:b1:23:a8:f7:d0:ad:d8:fe:11:40:b2:81: 36:29:1a:b0:9a:d8:f3:06:1e:8a:ec:fd:70:62:33:9e:96:12: cb:63:23:84:66:0c:48:2f:56:fa:c2:fb:4c:96:fa:80:d4:70: 9d:dd:a6:41:35:e0:79:53:ef:3e:67:da:44:bc:ea:a3:b1:64: 55:5c:5f:db:51:f9:9e:44:52:63:ae:b8:d8:5e:95:8f:84:5f: 44:68:9d:66:c3:de:d6:1b:d4:c7:7b:d0:35:0c:88:b3:1a:c7: 82:17:2a:2e:b7:70:03:84:6b:da:c4:3e:9f:59:94:1f:58:55: da:cb:0d:bc:bd:c3:8f:a3:d1:13:4d:d6:c9:4b:f2:0f:e9:6a: f6:a4:43:34:21:d8:fc:44:60:aa:69:34:d7:1e:e9:c6:04:a1: ca:35:2f:3c:c4:fe:c4:dd:a2:ad:48:09:8a:e5:ad:6d:e9:d8: 70:1d:1a:fe:63:d4:1e:e3:03:c4:37:54:b6:41:37:00:05:67: 0b:a8:46:5b -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkM0QTUxMTAvBgNVBAUTKENGRTA3MUE5NzJGRDc4QTY3RjZEM0VENTZBNjE4NDM0 MEFCM0UzQTYwHhcNMjYxMDEzMDUzNDI1WhcNMjYxMDIwMDUzNDI1WjAYMRYwFAYD VQQDEw02YWNkYzJlMS1lMTQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDrYWxgWMCRXcH3ORlSoR1s+9yK/YuLAWriTJC9TMdB/NjhsEkaPdrCaBwXF bm5bUjzWdz6POL+QlYoEB5VKhDgdmiVds7hAZrxZPxXogYKBZqpVKkuJILvpGPJd gNFk8x3AQwyWHtbPAL0GhYPUPEfqIxdZG541xnopsVIVQ+MKU6fzGoYkAAbpcDj/ YHOVHkV9Lj1DJSoStpHCS/I9BBrAaDw2LluUfaxUM3Hl53N6yySRWJLY6drczyD3 XvNkhgaighQVHePhT9bKaBHXYQqJMO1NgNZJ32bW5hg7hGZmxEv/C4m7JfdOgjbd 20p6KsmOH487T5nJKWi1/5wlMQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCTErPsp FTyJSIwCIPdV8hGg3gIMMB8GA1UdIwQYMBaAFM/gcaly/Ximf20+1WphhDQKs+Om MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzRBNS9CRjUwRTg2MkEy MzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVLWl9iVDdWYW1HRU5BcXo0 NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3otQnhxWEw5ZUtaX2JUN1ZhbUdFTkFxejQ2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QzRBNS9CRjUwRTg2MkEyMzQxMUVGOTc4QzhENkRDNEY5QUUwMi96LUJ4cVhMOWVL Wl9iVDdWYW1HRU5BcXo0NlkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAOg2fHg5Hr61HGiHYtpsE9SJRBceN0dLXvvWArRmFKyYOjOHlqO5F9A9uLp7B mxIKPpekkXc+u1rH2MoUsSOo99Ct2P4RQLKBNikasJrY8wYeiuz9cGIznpYSy2Mj hGYMSC9W+sL7TJb6gNRwnd2mQTXgeVPvPmfaRLzqo7FkVVxf21H5nkRSY6642F6V j4RfRGidZsPe1hvUx3vQNQyIsxrHghcqLrdwA4Rr2sQ+n1mUH1hV2ssNvL3Dj6PR E03WyUvyD+lq9qRDNCHY/ERgqmk01x7pxgShyjUvPMT+xN2irUgJiuWtbenYcB0a /mPUHuMDxDdUtkE3AAVnC6hGWw== -----END CERTIFICATE-----Generated at Tue Oct 13 19:10:37 2026 by rpki-client